7.8

CVE-2023-52974: linux Use After Free

CVSS: 7.8v3.1HighAnalyzed
AliasesUBUNTU-CVE-2023-52974DEBIAN-CVE-2023-52974
Published 27-03-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2023-52974 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.6% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.29%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 8
RHSA-2024:0431RHSA-2024:0432RHSA-2024:0575SUSE-SU-2025:02099-1SUSE-SU-2025:1176-1SUSE-SU-2025:1183-1

Timeline

  1. 27-03-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress If during iscsi_sw_tcp_session_create() iscsi_tcp_r2tpool_alloc() fails, userspace could be accessing the host's ipaddress attr. If we then free the session via iscsi_session_teardown() while userspace is still accessing the session we will hit a use after free bug. Set the tcp_sw_host->session after we have completed session creation and can no longer fail.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.29%

Chance of exploitation in the next 30 days

Percentile

21%

Versus all other CVEs

30-day change

0.00 pp

From 0.29% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.29%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu113 products
  • linuxAll versions (No fix recorded) | < 4.4.0-243.277 | < 4.15.0-211.222 | < 5.4.0-149.166 | < 5.15.0-72.79
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1121.127 | < 4.4.0-1159.174 | < 4.15.0-1156.169 | < 5.4.0-1102.110 | < 5.15.0-1036.40
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ a79af8a64d395bd89de8695a5ea5e1a7f01f02a8, < 496af9d3682ed4c28fb734342a09e6cc0c056ea4 | ≥ a79af8a64d395bd89de8695a5ea5e1a7f01f02a8, < 6abd4698f4c8a78e7bbfc421205c060c199554a0 | ≥ a79af8a64d395bd89de8695a5ea5e1a7f01f02a8, < d4d765f4761f9e3a2d62992f825aeee593bcb6b9 | ≥ a79af8a64d395bd89de8695a5ea5e1a7f01f02a8, < 9758ffe1c07b86aefd7ca8e40d9a461293427ca0 | ≥ a79af8a64d395bd89de8695a5ea5e1a7f01f02a8, < 0aaabdb900c7415caa2006ef580322f7eac5f6b6 | ≥ a79af8a64d395bd89de8695a5ea5e1a7f01f02a8, < 61e43ebfd243bcbad11be26bd921723027b77441 | ≥ a79af8a64d395bd89de8695a5ea5e1a7f01f02a8, < f484a794e4ee2a9ce61f52a78e810ac45f3fe3b3 | 2.6.39
  • linux_kernel< 4.14.306 | ≥ 4.15, < 4.19.273 | ≥ 4.20, < 5.4.232 | ≥ 5.5, < 5.10.168 | ≥ 5.11, < 5.15.93 | ≥ 5.16, < 6.1.11 | 6.2:rc1 | 6.2:rc2 | 6.2:rc3 | 6.2:rc4 | 6.2:rc5
Debian1 product
  • linux< 6.1.11-1

3 vendors · 116 products

References

11 links
Show all 11 references